
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa
File: 43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa (raw, json)
Hash identifier: CUEP++XtOfvuS0yyIaDsOrDw0taqYLhrYBViv4HdtQo=
Subject key identifier: 88:38:43:B1:A4:A9:E1:84:4E:23:DC:42:2F:26:D3:D2:9A:0F:A6:4A
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584EA79377AD38C3BF0125893600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 17119
IP address blocks: 209.4.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:93:77:ad:38:c3:bf:01:25:89:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=aaabacb0-af8c-40ea-ac1d-a6fa19d7d657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:77:3c:e8:5e:aa:f5:2c:61:73:b4:af:57:
e6:d1:f6:ca:5c:48:5c:86:d2:c9:56:27:70:27:6b:
07:47:bb:5e:46:95:db:65:c8:d2:50:34:9e:d1:3b:
46:0a:ce:82:61:b0:e7:85:fa:ef:d1:3d:c9:61:94:
8a:f0:92:54:cd:06:28:b0:ff:f0:27:e9:e0:59:c3:
8c:dd:de:d8:52:ce:52:04:ef:f4:1f:8a:97:7f:8e:
b6:33:6f:00:9b:1f:5d:72:e7:3e:2f:3d:1b:d1:48:
be:93:66:65:6d:e0:05:4e:50:15:a5:8e:98:17:30:
8f:f7:5e:d8:ea:aa:88:86:8d:f7:23:8b:d2:d0:e6:
67:30:1c:e6:ba:d7:19:99:07:d4:06:e0:58:0c:d3:
69:c4:b4:b0:5f:d7:dc:17:9e:87:ad:57:0f:40:8e:
d3:c3:70:cc:8d:87:2b:c0:27:a1:dc:4c:9d:1d:ae:
d5:69:98:1d:e5:17:6a:95:4b:10:a5:6a:11:52:25:
09:91:48:4a:65:54:b8:b0:97:81:eb:a0:b9:28:48:
8e:e7:2c:17:eb:8e:36:d7:f8:cc:8d:d8:6c:ac:60:
f7:e2:8f:e1:ec:9c:bb:b6:3d:12:59:4f:34:cb:77:
7a:75:94:c0:3b:b3:75:56:2b:a3:72:0b:97:bb:d0:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:43:B1:A4:A9:E1:84:4E:23:DC:42:2F:26:D3:D2:9A:0F:A6:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/43beba8a-e453-3cb0-a77d-aabd6c1ad0e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
209.4.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:8b:e4:cf:93:01:35:ff:c9:6e:5e:6e:fc:18:73:99:16:25:
79:75:00:7c:fd:66:a3:07:3c:0f:87:9e:0a:57:30:3c:18:c8:
2f:a0:e1:19:43:e7:79:d5:a7:c7:86:88:63:6e:eb:c4:5d:03:
95:92:30:cd:25:d6:eb:9c:0b:75:d2:c8:92:99:78:85:88:14:
c6:2a:77:f0:8a:cb:d5:5a:70:c2:0c:9f:01:5d:3c:f9:8c:3a:
0d:4d:ca:46:e9:2b:af:41:7d:ec:b2:8c:16:0e:a7:b2:a7:8b:
85:7d:f3:43:b9:de:5b:fc:3a:5a:b9:23:54:47:a0:99:b8:ca:
d2:44:09:af:1a:04:76:e6:27:73:46:7f:ec:ff:15:88:8d:fa:
3d:7b:60:0a:c8:b2:a1:eb:b1:bd:0e:4b:3d:d7:69:0e:31:1e:
9b:c2:d5:0c:9d:80:48:15:11:6a:52:f9:88:97:30:6d:cd:7b:
69:ac:e2:93:65:38:75:b6:21:e9:bb:74:cc:77:90:67:4c:ba:
60:52:f8:ab:6d:fa:ee:6c:20:9a:a1:91:52:15:d7:27:8c:c8:
11:45:bb:90:59:b0:a1:f7:14:ab:0c:f6:4f:5a:7e:1c:b2:82:
3c:45:84:8c:0e:c9:fb:29:de:f3:e7:d0:2d:7b:f2:ce:04:28:
26:48:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:50:13 2026 by rpki-client